CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c
In the Linux kernel, the following vulnerability has been resolved:
usb: gadget: uvc: Fix ERRPTR dereference in uvcv4l2.c
Fix potential dereferencing of ERRPTR() in findformatbypix() and uvcv4l2enumformat().
Fix the following smatch errors:
drivers/usb/gadget/function/uvcv4l2.c:124 findformatbypix() error: 'fmtdesc' dereferencing possible ERRPTR()
drivers/usb/gadget/function/uvcv4l2.c:392 uvcv4l2enumformat() error: 'fmtdesc' dereferencing possible ERRPTR()
Also, fix similar issue in uvcv4l2tryformat() for potential dereferencing of ERRPTR().
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-50056?
CVE-2024-50056 is categorized as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2024-50056?
The fix for CVE-2024-50056 involves upgrading to the latest version of the Linux kernel that includes the patch for this vulnerability.
What types of systems are affected by CVE-2024-50056?
CVE-2024-50056 affects systems running versions of the Linux kernel from 6.11 to 6.11.4.
What is the main issue addressed by CVE-2024-50056?
CVE-2024-50056 addresses a potential dereferencing of ERR_PTR() in the uvc_v4l2.c driver code.
Is CVE-2024-50056 a remote exploitation risk?
CVE-2024-50056 does not specifically indicate a remote exploitation risk but may impact the stability of USB gadget functionality.